« first day (3783 days earlier)      last day (56 days later) » 

10:00 PM
My god I hate SQL and dates ಠ_ಠ
 
Why? Dates are tasty
 
dates are stressful though. social interaction is just hard :p
 
The spam flags against this were raised on 2018-01-31. SEDE being SEDE makes all vote datetimes as <date> 00:00:00, so I knew it was flagged at some point on 2018-01-31. My query had DeletionDate <= '2018-01-31', cause I figured that would work. Expanded it to DeletionDate <= '2018-02-28' and it showed up ಠ_ಠ
 
what
lol
 
Because apparently 2018-01-31 03:58:58 is not <= 2018-01-31 ლ(ಠ益ಠლ)
 
10:03 PM
Well 2018-01-31 would probably be the beginning of the day
Why not just < '2018-02-01'?
 
okay but then how is 2018-01-31 <= 2018-02-28 ??????
wait
hold up i'm stupid
^^^^
somehow i thought feb.28 was 1 day before jan.31
 
@RedwolfPrograms Because I just added a month, then it got pissy that Feb 31st doesn't exist
 
SQL go brrr
 
I mean if it accepted Feb 31st that would make it even worse lol
 
yeah true
 
10:05 PM
But I want to be lazy :P
 
then just take the difference and check if it is less than 1 day
 
that's... like more work :P
 
anyway, i'm gonna start working through your query list (from the top). i'll let you know where i get to :p
 
Aren't there still some pending flags left over?
I know I've got 4 pending rn
 
there are 17
i intend to clear them all together again though
 
10:17 PM
Is there any way to tell if a post has already been flagged?
 
not for you guys, unless it's your own pending flag
 
:\
 
Fun fact: there are exactly 2 spam answers in the Sandbox
 
both gone i hope?
 
That's impressive. I'd thought it'd be a good target for spammers, given its activity
 
10:20 PM
Let me rephrase that: that are 2 answers in the Sandbox that were spam-nuked :P
There might be more that was just deleted or not caught
 
well, i don't feel like going through all 3k+, but if anyone does, i'll address flags :p
 
The Sandbox is also the location of the only offensive red flagged answer on meta
 
Wait really?
That's surprising
Is there a link?
 
Here you go - obvious warning that it got offensive-flagged
 
aw, I can't see it :(
 
10:24 PM
It's perfectly fine, albeit a bad challenge idea, right up until the example
> Write me some syntactically valid code that either directly or indirectly suggest that I am interested in her.
This might be code that reads somewhat like English, or it might be an abstract, high level concept that somehow encapsulate the idea of me being attracted to her. The cheesier the better!
 
lol
 
oh haha i think i've seen this one before
@RedwolfPrograms i mean, meta had a 5 rep requirement for a while (whether or not by design.........) so it's not too surprising spam is low there
also my flags are really unhelpful, half of them are just "[status-declined]" with no other text or anything
 
It'd be nice if the IGS people would sandbox their spam first. I'll suggest it on the next one :p
 
in case you're serious, please don't :p
@hyper-neutrino because when i go through to clear these flags, i can trust that whatever i flagged it as was based no my judgement so i don't really need to add an explanation for myself in the future
 
<10k users, is this link a 404?
 
10:30 PM
Yes
 
I'm half dreading reaching 10k rep because I'll be able to see spam and offensive posts, but I also wanna reach 10k so I can bully people with my power so I can help this community's moderation
 
It only shows you a warning, you have to go into revision history to see spam/offensive posts
 
Oh good
 
Or have a userscript, which is what I do
 
^ What it looks like
 
10:37 PM
@cairdcoinheringaahing Does it let you hide deleted answers?
 
So, regarding this, it looks like something happened between 31/1/18 and 24/7/20 that switched back to the 5 rep requirement, as a spammer was able to post spam with 1 rep on 31/1/18
 
idk why that's disabled for us. it wouldn't hinder me, just stop me from seeing offensive content accidentally :p
 
@user The opposite - it shows me what the content of nuked posts is without needing to check the history
Gives me a taste of mod powers :P
 
I don't think I've ever seen a post that's so offensive it needs to be hidden by default, but even if there was one there's no way to know if it's that bad based on the warning alone.
 
@hyper-neutrino Link
 
10:39 PM
Maybe making that something a moderator enables for a post would be better.
 
@cairdcoinheringaahing Oh lol
 
@RedwolfPrograms There's been a few I've found via transcript reading that had some awful images (think porn and gore)
 
@cairdcoinheringaahing Is that good or bad?
 
@user I'm not sure
 
Thought of another bad thing you could do with the chat vulnerability: Onebox something like [well known porn website]/#.jpg so people on school or work computers appear to be going to that site.
That could get you into some serious trouble, and you couldn't prove you hadn't because you wouldn't know what had caused that
 
10:43 PM
I think I'm going to have to start using NoScript in chat now
 
In chat it's not that likely to get someone in trouble. But put it in an answer to a popular question and you've got potentially thousands of people loading that URL, who are quite likely to not even see the answer.
 
I trust you all too much
 
Bye bye, time to leave SE
 
Have you reported this on MM @RedwolfPrograms?
 
It's been reported for years. They haven't done anything about it.
89
Q: Allowing images from external sources opens doors to serious security exploits

Aaron YodaikenNote: Please see this answer for more info on how this poses a security risk. I'm sure you guys already know this, but allowing users to put images from any source in questions means that askers can get all the analytical data you can about their question. So a malicious user could theoreticall...

Ten of them, actually
> Asked 10 years, 11 months ago
 
10:51 PM
> So what? Folks can track your viewing habits - that's a part of using The Web. Hopefully you already have off-domain cookies turned off, but if not then do that. If you're really concerned about it, use a proxy...
 
I'd make that -18 but I don't have enough rep :/
 
I originally down-voted just for the callous attitude towards user privacy. If I could down-vote again though, I would. Although not stated in the question for this thread, the use of external images is not only a privacy problem. It's also a content management issue. This is addressed in Jeremy Banks' answer ("Eliminate potential dependencies on external resources, as we generally require.") and, ironically enough, exemplified in another answer by uɐɯsO uɐɥʇɐN. — Iszi May 26 '16 at 16:03
 
I trust SE to have my IP, not any random user popping into TNB
They should only allow i.stack.imgur... images instead of displaying just any image
 
This is not only a strawman of the point of this question and its answers, but a particularly dangerous one. This goes way beyond tracking. — Redwolf Programs 27 secs ago
 
10:55 PM
^
 
I love the fact that you've set a bounty asking for "an answer from a reputable source" when there's an answer by Shog there :P
 
More specifically, I'm looking for a quality answer from a reputable source
:p
 
Don't get me wrong, his answer isn't good, but its funny to call Shog non-reputable :p
 
Another bad thing you can do with this: Use the list of rooms various mods are in to find their IPs, then detect when they look at the transcript of a particular room.
You can also phish passwords from IE users, who are especially likely to be vulnerable to those sorts of things
 
Eh, IE users deserve to be punished /s
 
11:03 PM
Old versions of firefox too, if I'm not mistaken
Though that's probably a bit less common
 
> This doesn't finish on TIO for any valid input
I love when I write answers with that in :P
 
makes me wanna cry
I'll never upvote an answer that does that
 
@cairdcoinheringaahing How do you test it?
 
if you ever want a taste of real inefficiency give brachylog a try
 
11:04 PM
Hey, I also included a version that finishes on TIO for like 5 valid inputs :P
@user Add speed optimisations that I know won't affect the final program, then remove them to save bytes
 
Ah
 
For example, that's from this recent answer of mine. If you add ḣ14 after the , it can handle most of the single-line test cases in 60 seconds
ḣ11 can make it even faster, but doesn't always give the correct output
17 seconds for a 1x5 input with 2 spaces :P
More people have Marshal on SO (raise 500 helpful flags, awarded 3306 times) than have Citizen Patrol on CGCC (raise one flag, awarded 1546 times) ಠ_ಠ
 
SO do be like that
 
I'll take that as a sign of how little spam we get
 
Higher traffic, higher chance of spam
 
11:20 PM
Made a post listing possibilities with the vulnerability, some of which will hopefully remind people that it's not just about tracking: meta.stackexchange.com/a/366296/388685
 
I should farm up some MM rep so I can get edit privs :p
 
@RedwolfPrograms One thing to note: if y'all see a post with these images, flag for mod intervention, explain the problem and tell them to nuke the revision history. It takes 2 mods to do so, but they are able to do this
 
Good point. I'll mention that in the answer.
 
yeah. if you notice this, please let us know, and I'll turn on a proxy and disable JS or whatever and attempt to committ 11 :p
 
It (unfortunately) exposes the mods to these posts, but I think it's a valid use of their powers. Just make sure to link back to that answer in the flag to let them know of the dangers
 
11:24 PM
It might also be worth leaving a section mentioning to mods what they can do to nuke these without making themselves vulnerable and let people who flag it know they can link to that answer for that section (more or less what caird was saying, if I read it right)
 
People only started caring about security once they got ransomwared, maybe we can use the same approach here. Who wants to make a pornographic IP tracker :P
 
shog's answer is now at 0 score and soon will likely go negative :p
 
@rak1507 Porn drives innovation, so I wouldn't be surprised if that already exists
 
lmao
another thing about hosting on imgur
if people post offensive/NSFW/whatever images from external sources, it'll still be in rev history
if it's particularly bad, I know Catija has nuked a couple of images from the server itself so it's possible to nuke the images out of existence from the source
 
@hyper-neutrino You think I'm joking, but its been consistently shown that one thing that always results in development in fields is porn. If you want some technology developed, think about how it will improve the porn industry
 
11:26 PM
just do what fastly did today and nuke the entire internet
 
though banishing the rev history is probably easier, CMs are able to remove images from the imgur server itself. not particularly important or notable
@cairdcoinheringaahing Oh no I didn't take what you said as a joke, even though I did respond with "lmao" because I think it's quite funny, but very true. I mean, just think about the first thing people did with faceswapping AI back in 2017/8 (I saw a Tom Scott video about this earlier today, actually)
(the second thing was faceswapping Nicholas Cage into random things which is far funnier but yeah, porn does drive innovation...)
 
Or VR. Like 90% of the funding and development into VR comes from porn :P
 
> 6,000 VR [pornographic] videos released to date [July 23rd, 2018] have also generated about $50 million in revenues.
 
May 26 at 19:55, by Redwolf Programs
How did we go from voting userscripts to p*rn so quickly lol
 
11:29 PM
You know what this means. We need to make golfing language porn.
4
 
s/voting userscripts/security vulnerabilities
 
@RedwolfPrograms Forgive me: what are you doing step-quick?
I'll go sit in the corner and think about my life choices now
 
@RedwolfPrograms there's a porn esolang (warning: extremely nsfw, lol)
 
Honestly security vulnerabilities and porn isn't that far of a jump :p
 
> It is designed such that source code looks like poorly written fetish erotica
 
11:30 PM
When I left, y'all were talking about privacy and security. I come back, and what do I see? "what are you doing step-quick"
 
At least they acknowledge that it's poorly written :P
 
there's also this
 
ಠ_ಠ
 
Ooh, it has a Vim plugin :P
 
11:31 PM
@hyper-neutrino Exactly.
 
> Classic FizzBuzz program in Fetlang with characters from Buffy the Vampire Slayer
ngl, that's a sentence I never thought I'd read
 
So, who likes oranges?
lyxal has left the chat
 
Personally, I prefer apples, but there's really no good way to compare the two
 
Oranges are nothing more and nothing less than their name. Apples are just confusing. What does "apple" even mean, outside of the fruit?
 
The name of the color came from the fruit
The color was previously called yellow-red
 
11:36 PM
I suspect you're kidding, but I think I've heard this before
 
Pretty sure it was called "Reddit upvote button color" but ok
 
@Applewolf red should become apple then
 
The word orange is both a noun and an adjective in the English language. In both cases, it refers primarily to the orange fruit and the color orange, but has many other derivative meanings. The word is derived from a Dravidian language, and it passed through numerous other languages including Sanskrit and Old French before reaching the English language. The earliest uses of the word in English refer to the fruit, and the color was later named after the fruit. Before the English-speaking world was exposed to the fruit, the color was referred to as "yellow-red" (geoluread in Old English) or "red...
 
Eating an orange
While making love
Makes for bizarre enj-
oyment thereof.
 
tip: that's a generally bad idea, because the oils contain in orange peels are able to damage/break condoms, IIRC
(the yt video I saw was about balloons but I imagine it applies here too)
 
11:39 PM
Uh
 
That's...why do you know this
 
I saw a youtube video about what happens if you squeeze an orange peel near a balloon
 
I love that user's attempt to shift the conversation topic completely backfired :P
 
(ノ°Д°)ノ︵ ┻━┻
 
@hyper-neutrino Balloons are very different from condoms tho
 
11:42 PM
@cairdcoinheringaahing tbf I posted that little poem from the Wikipedia article
 
yes, but I was just guessing :p
but based on that chem SE answer maybe it doesn't apply here
 
> Of course, if you're lubricating your condoms with hexanes, you're a) an idiot or b) absolutely insane.
I mean, ... yeah
 
@cairdcoinheringaahing Phew, now I can apply orange juice on my condoms without fear
4
 
11:44 PM
i didn't remember the details. i just thought it'd be funny to randomly mention that and make people wonder why the hell i knew that :p
but it turns out that was wrong so now i am dumb :(
 
Easy mistake to make :p
 
Just ignore this conversation, Wezl
 
ok will (not) do
 
should the dupes to "can we have a custom tour page", which I am going to , be also reviewed or planned to avoid throwing too many things to the CMs?
(will ask in TL too - probably better anyway)
 
Someone could compile a gist with links to all of those dupes, so whenever the tour page thing is finished, those can be marked status-completed (or status-declined ⍨) too
 
11:49 PM
@hyper-neutrino Speaking of, should we have a tag on meta? It looks to apply to 30+ questions (those + ones talking about the tour)
 
^
 
@hyper-neutrino I think dupes are generally ok to be left alone tag-wise
 
Okay. They'll still show up on the list though, so I wanted to do something about that, but it's not really important so I'll just leave them as-is
@cairdcoinheringaahing IMO yes. it would categorize posts in a helpful manner and has a good body of posts to add to, so I think we can just go ahead and create it
would you mind flagging anything that you think would make sense to have it and I'll create the tag in my edit spree sometime in the near future?
 
Sure, will do :)
Cause, annoyingly, that search isn't a great one ಠ_ಠ
 
mhm :/
 
11:52 PM
GTG for now
Made a big formatting edit to the sandbox, revert if it's too much
 
@cairdcoinheringaahing I got through all 85 of those posts BTW
we now have 78 pending flags on meta...
 
@hyper-neutrino Nice :D
@hyper-neutrino 4 of those are mine, and once validated, I'll be joint first in terms of number of helpful flags on meta :P
 
I'm not sure if I will retract my flags or just clear them. The latter is easier but feels like mod abuse :p
 

« first day (3783 days earlier)      last day (56 days later) »